CVE-2023-53558

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()

pr_info() is called with rtp->cbs_gbl_lock spin lock locked. Because

pr_info() calls printk() that might sleep, this will result in BUG

like below:

[ 0.206455] cblist_init_generic: Setting adjustable number of callback queues.

[ 0.206463]

[ 0.206464] =============================

[ 0.206464] [ BUG: Invalid wait context ]

[ 0.206465] 5.19.0-00428-g9de1f9c8ca51 #5 Not tainted

[ 0.206466] -----------------------------

[ 0.206466] swapper/0/1 is trying to lock:

[ 0.206467] ffffffffa0167a58 (&port_lock_key){....}-{3:3}, at: serial8250_console_write+0x327/0x4a0

[ 0.206473] other info that might help us debug this:

[ 0.206473] context-{5:5}

[ 0.206474] 3 locks held by swapper/0/1:

[ 0.206474] #0: ffffffff9eb597e0 (rcu_tasks.cbs_gbl_lock){....}-{2:2}, at: cblist_init_generic.constprop.0+0x14/0x1f0

[ 0.206478] #1: fff

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References